Azure Compute roles and permissions

Role Permission Description
Azure Resource Management Storage Account Reader

Can read all Azure Resource Management Storage Account Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermstorageaccount.read Can read all Azure storage account Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
 Azure Resource Management Storage Account Writer

Can read and execute all Azure Resource Management Storage Account Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermstorageaccount.read Can read all Azure storage account Command Blocks and jobs
command.cmdazurermstorageaccount.write Can write all Azure storage account Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
command.schedules.write Can write all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
 Azure Resource Management Virtual Machines Reader

Can read all Azure Resource Management Virtual Machines Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermvirtualmachine.read Can read all Azure virtual machine Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Azure Resource Management Virtual Machines Writer

Can read and execute all Azure Resource Management Virtual Machines Command Blocks

command.category.read Can read all corresponding Command Block categories
command.cmdazurermvirtualmachine.read Can read all Azure virtual machine Command Blocks and jobs
command.cmdazurermvirtualmachine.write Can write all Azure virtual machine Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
command.schedules.read Can read all schedules Command Blocks and jobs
command.schedules.write Can write all schedules Command Blocks and jobs
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)

Related articles

Updated: Nov 13, 2024